[Discover-next] Add query editor extensions (#7034)
Security Report
| CVE | Severity |  CVSS Score |
Vulnerable Library | Suggested Fix | Issue |
|---|---|---|---|---|---|
WS-2017-3772Vulnerable Source Files: ❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js |
 High |
7.5 | juice-shopjuice-shop-14.5.1_node16_darwin_x64 | Upgrade to version: underscore.string - 3.3.5 | #4734 |
CVE-2024-37890Path to dependency file: /package.json Path to vulnerable library: /node_modules/ws/package.json Dependency Hierarchy: -> cli-1.10.4.tgz (Root Library) -> cli-command-1.10.4.tgz -> core-1.10.4.tgz -> ❌ ws-8.5.0.tgz (Vulnerable Library) |
High |
7.5 | ws-8.5.0.tgz | Upgrade to version: ws - 5.2.4,6.2.3,7.5.10,8.17.1 | #7076 |
CVE-2024-37890Path to dependency file: /package.json Path to vulnerable library: /node_modules/jsdom/node_modules/ws/package.json Dependency Hierarchy: -> jest-27.5.1.tgz (Root Library) -> core-27.5.1.tgz -> jest-config-27.5.1.tgz -> jest-environment-jsdom-27.5.1.tgz -> jsdom-16.7.0.tgz -> ❌ ws-7.5.7.tgz (Vulnerable Library) |
High |
7.5 | ws-7.5.7.tgz | Upgrade to version: ws - 5.2.4,6.2.3,7.5.10,8.17.1 | #7076 |
CVE-2023-28155Path to dependency file: /package.json Path to vulnerable library: /node_modules/@cypress/request/package.json Dependency Hierarchy: -> cypress-9.5.4.tgz (Root Library) -> ❌ request-2.88.12.tgz (Vulnerable Library) |
 Medium |
6.1 | request-2.88.12.tgz | Upgrade to version: @cypress/request - 3.0.0 | #5893 |
CVE-2023-26487Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium |
6.1 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3525 |
CVE-2023-26486Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium |
6.1 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3526 |
CVE-2020-11023Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jquery - 3.5.0;jquery-rails - 4.4.0 | #4732 |
CVE-2020-11022Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.5.0 | #4733 |
CVE-2019-8331Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1 | #4722 |
CVE-2019-11358Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jquery - 3.4.0 | #4730 |
CVE-2018-20677Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: Bootstrap - v3.4.0;NorDroN.AngularTemplate - 0.1.6;Dynamic.NET.Express.ProjectTemplates - 0.8.0;dotnetng.template - 1.0.0.4;ZNxtApp.Core.Module.Theme - 1.0.9-Beta;JMeter - 5.0.0 | #4725 |
CVE-2018-20676Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0 | #4728 |
CVE-2018-14042Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: org.webjars.npm:bootstrap:4.1.2.org.webjars:bootstrap:3.4.0 | #4727 |
CVE-2016-10735Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0, 4.0.0-beta.2 | #4729 |
CVE-2015-9251Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.0.0 | #4736 |
| Medium |
5.3 | juice-shopjuice-shop-15.2.0_node16_win32_x64 | Upgrade to version: micromatch - 4.0.6 | #6791 | |
CVE-2023-44270Path to dependency file: /package.json Path to vulnerable library: /node_modules/postcss/package.json Dependency Hierarchy: -> ❌ postcss-8.4.12.tgz (Vulnerable Library) |
Medium |
5.3 | postcss-8.4.12.tgz | Upgrade to version: postcss - 8.4.31 | #5178 |
CVE-2018-14040Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
 Low |
3.7 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0,4.1.2 | #4723 |
Total libraries scanned: 2558
Scan token: 63caaecc55f94e6a9bc1af220bd915e5